Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: z5pk4LC65v0W4QWwA1zKX2wtPjDJsKgkTXcyimnWy5c=
Subject key identifier: 3D:B7:FA:75:55:10:B6:59:6A:18:86:19:FC:34:78:B5:48:AC:CF:5B
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019D9B51636BCE7424B1E9C5E84D65BB15C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1863
Signing time: Fri 17 Apr 2026 12:01:35 +0000
Manifest this update: Fri 17 Apr 2026 12:01:35 +0000
Manifest next update: Sat 18 Apr 2026 12:01:35 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: nsrU9x1SjF0VGJusWcmaPOotVP2tkFfvr+LLXds6J2I=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:63:6b:ce:74:24:b1:e9:c5:e8:4d:65:bb:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Apr 17 12:01:35 2026 GMT
Not After : Apr 18 12:01:35 2026 GMT
Subject: CN=3db7fa755510b6596a188619fc3478b548accf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:bc:d7:37:44:6d:10:02:52:d5:0c:f5:3e:
e6:78:e8:ae:e4:fb:b6:f1:b4:9e:f9:f4:85:f2:5f:
ea:be:88:0e:ec:f8:e9:f3:08:35:0e:95:e8:a0:a2:
9b:e5:d4:34:bd:8c:ba:c5:15:e6:0b:26:9d:ff:65:
fe:36:79:2f:aa:ca:c3:3c:ff:14:b7:0f:2b:37:7c:
91:e6:f0:87:3b:de:91:09:77:29:d8:01:b5:d6:0c:
1f:55:66:25:2e:65:e6:ca:f3:38:c3:d1:ac:a3:e0:
04:41:3a:5a:6c:c8:5a:91:b4:e9:5f:c3:07:6a:77:
95:ff:7a:19:11:ff:4f:9d:33:57:df:5b:b3:75:6d:
87:98:c0:40:65:45:8f:89:cd:af:ce:37:52:e7:f6:
42:ba:ad:95:a4:ba:21:e1:91:cd:c9:9e:50:cd:8e:
e5:a6:81:92:05:cd:79:10:18:c0:2a:30:d0:d5:b6:
59:ac:d6:a8:8d:b7:ff:7e:64:c1:67:cb:e7:ad:6b:
d1:16:cc:df:4a:65:16:af:29:b5:78:03:fe:3c:c9:
40:9c:37:1a:30:f4:f3:ec:da:3a:a0:3d:2d:ae:f4:
16:15:87:31:fd:40:49:6d:53:82:6f:d0:30:6f:16:
5f:e5:fc:e1:7e:8e:7e:94:29:d0:21:1a:90:02:be:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:FA:75:55:10:B6:59:6A:18:86:19:FC:34:78:B5:48:AC:CF:5B
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d1:60:2f:17:01:6e:51:11:07:c6:99:e7:b1:47:52:04:ae:
1c:6b:5c:40:b8:b4:09:05:11:db:fa:57:64:c5:be:1c:d7:e7:
48:70:a1:4f:16:90:33:aa:bf:81:a4:4f:57:5a:0c:4c:56:f9:
3b:07:c7:21:28:8b:4b:45:5a:56:8d:a3:39:8e:fe:cc:e2:70:
f9:6d:5f:0c:6e:5a:93:00:00:2b:b2:22:2d:a3:b8:49:ea:78:
f6:e0:58:40:b7:d2:56:b8:57:ac:81:58:4a:0f:37:1d:d1:3c:
68:a5:02:a0:a3:6e:85:9b:bf:8e:c5:f6:f4:50:83:f3:99:91:
1f:d2:40:51:a3:50:32:6c:66:18:55:1b:93:3e:dd:b7:38:ec:
82:a2:b1:af:d2:b1:da:9f:b0:07:70:a4:f2:e0:22:27:c6:ad:
84:74:14:1b:91:2d:d9:9e:6b:12:53:be:9c:e0:e2:2a:6a:56:
c7:e2:1b:da:81:c3:c5:9b:3e:d6:3a:98:c5:83:4a:7a:04:2b:
0c:35:b7:a0:d9:af:f0:1f:96:30:f7:72:83:7e:2f:89:20:b0:
b8:bf:50:84:96:d8:f2:54:fa:11:97:9c:3c:89:46:83:24:94:
b4:d4:d1:c1:7b:98:e9:f7:5e:c0:12:6e:76:66:af:fb:8e:a3:
a5:eb:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:01 2026 by rpki-client